CVE-2019-5451: Nextcloud Server

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time.

Affected products

• Nextcloud Nextcloud Server: before 3.6.1 (fixed in 3.6.1)

Published 2019-07-30. Last modified 2026-06-17.